Win[1][.]zip | Triage

Resubmissions

01-07-2024 20:02

240701-yr3j6awgre 3

27-06-2024 17:07

240627-vnbeqa1dkd 3

25-06-2024 15:48

240625-s85sysyfnh 3

24-06-2024 16:39

240624-t6dr5avhlp 3

24-06-2024 16:37

240624-t4x3zsvgqj 5

23-06-2024 21:16

240623-z4fftssbph 3

23-06-2024 16:48

240623-vbj64axdpf 3

23-06-2024 16:26

240623-txw74s1alr 3

Sharing

General

Target

Win[1].zip
Size

5.8MB
MD5

29745fcb50eac17ff6f983ad8155419f
SHA1

b7ce124dca94f02d8f33ada343bbe899e0bd66b6
SHA256

82aae3112ca38c817ba94f7b1c8d24d05a66613f1a36e76a8f9cb58c990b6276
SHA512

8df18234373d9d06b0d477d52fea7c95c74e99104081536d2740f2436f7dfe888b99225b725f3138608f954f44d3303008e29b7689bdbd69b8062721aec06a17
SSDEEP

98304:l+drQJ5K85e5U/mF7oK/4qP/Rb9YNHMP/4Ytbzsz3tcHTKz5c+WMyvt9FsnVLPP8:Er6KoeHJjpYMDzsz2HOtcF9FsnK+4vmE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/FSSEWin.exe

Files

Win[1].zip
.zip
FSSEWin.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

PDB Paths

D:\CSharp\2015\FSSEWinSimple\FSSEWinSimple\bin\Release\FSSEWin.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11.6MB - Virtual size: 11.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ